2 matches found
slug denial of service vulnerability
slug is a module capable of blocking strings. A security vulnerability exists in slug. An attacker could exploit this vulnerability to cause a denial of service with untrustworthy specially crafted input...
CVE-2017-16117
The CVE-2017-16117 issue affects the slug module (slugify strings, including unicode). Affected component: slug's regex-based parser vulnerable to Denial of Service when processing untrusted input. Impact: parsing untrusted input can cause the event loop to block for about 2 seconds, typically at...